A Portal to the Beyond: Gen AI and API Security with Allison Averill

Phantom Threats in API Security with Adam Arellano

The Haunted Web: API Sprawl and Shadow APIs with Richard Bird

Dark Corners of APIs: Finding Hidden Threats with Katie Paxton Fear

The Witch's Brew: OWASP Vulnerabilities and Testing with Jayesh Ahire

API Security Risks: A 5-Part Podcast

## API Security Threats and Best Practices - Podcast Series Summary

This five-episode podcast series provides a comprehensive exploration of modern API security challenges, featuring insights from industry experts affiliated with Traceable. The series covers a wide range of critical topics, including the risks posed by shadow, rogue, and zombie APIs, the complexities introduced by generative AI and third-party API integrations, and the persistent vulnerabilities cataloged by OWASP. Each episode brings a distinct expert perspective, from a Global CISO discussing phantom threats to Traceable's CSO addressing API sprawl, ensuring that listeners receive well-rounded, authoritative guidance on protecting their API infrastructure.

A central theme across the series is the growing difficulty of maintaining visibility and control over expanding API ecosystems. Multiple episodes highlight how shadow APIs and API sprawl create dangerous security blind spots that traditional defenses often fail to detect. Richard Bird and Katie Paxton-Fear both address the challenge of uncovering hidden APIs before malicious actors can exploit them, while Adam Arellano focuses on the phantom threats that bypass conventional security measures. The series also looks forward, with Allison Averill examining how generative AI and third-party API dependencies introduce supply chain risks that demand new best practices. Jayesh Ahire rounds out the discussion by diving into OWASP API vulnerabilities and proactive testing strategies designed to identify and remediate exploits before they cause harm.

Together, these episodes offer security professionals and developers a practical framework for understanding and addressing today's most pressing API security concerns, from detection and visibility to testing and supply chain risk management.